Senior Security Engineer

This is a fully remote position, open to applicants in United States.

📋 Description

• Take ownership of and manage security tools, which includes tuning policies, overseeing upgrades, resolving integration issues, and decommissioning redundant tools.

• Oversee endpoint security for both Mac and Windows platforms utilizing Microsoft Defender, Intune, and Jamf Pro.

• Administer Netskope policies related to web, SaaS, and data loss prevention.

• Strengthen identity management in Okta and Microsoft Entra ID, focusing on SSO, MFA, conditional access, privileged access, and conducting admin access reviews.

• Establish and enforce security configurations within Google Workspace, Slack, Atlassian, and various other SaaS applications.

• Manage email security protocols using Abnormal Security and Google Workspace controls.

• Facilitate secrets and credential management through 1Password.

• Enhance AI tools such as Claude, Gemini, and ChatGPT by configuring admin settings, connector and MCP controls, audit logging, and implementing data protections.

• Develop and fine-tune detections in Google SecOps in collaboration with the managed SOC partner.

• Address incidents, lead post-incident reviews, and engage in the on-call rotation.

• Monitor and drive the remediation of cloud and code vulnerabilities identified by Wiz and Snyk.

• Collaborate with Engineering on AWS security and secure development methodologies.

• Automate security processes utilizing Python, APIs, and workflow tools.

• Gather evidence for SOC 2 compliance and assist with client security assessments.

• Evaluate security risks associated with new vendors and tools.

• Mentor colleagues and disseminate knowledge throughout the Technology team.

⛳️ Requirements

• Minimum of 6 years of experience in cybersecurity or security-centered IT engineering.

• Practical experience managing EDR and MDM tools across Mac and Windows environments.

• Strong understanding of identity management platforms such as Okta or Entra ID, including SSO, MFA, and conditional access.

• Experience in securing SaaS platforms like Google Workspace or Microsoft 365.

• Familiarity with SSE or secure web gateway tools, as well as data loss prevention (DLP) technologies.

• Experience in tuning a SIEM and responding to security incidents.

• Working knowledge of SOC 2, NIST CSF, and GDPR, and an understanding of how technical controls support these frameworks.

• Proficiency in scripting with Python, Bash, or PowerShell.

• Comfortable working with REST APIs.

• Excellent communication skills, both written and verbal, in engaging with technical and non-technical audiences.

• Ability to manage multiple responsibilities simultaneously in a small team setting.

• Preferred: Hands-on experience with Okta, Microsoft Defender, Intune, Jamf Pro, Netskope, Google SecOps, or Wiz.

• Preferred: Experience in hardening enterprise AI tools such as Claude, Gemini, or ChatGPT, including MCP servers and connectors.

• Preferred: Background in creating security automation or workflows that minimize manual tasks.

• Preferred: Certifications such as CISSP, GIAC, Security+, or a cloud security certification.

🏝️ Benefits

• Competitive health benefits.

• Matched 401k and pension plans.

• Paid time off (PTO).

• Generous parental leave.

• Gym subsidies.

• Educational reimbursements for career advancement.

• Recognition programs.